d3cd9686579aa7fb429502c1a833a426_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3cd9686579aa7fb429502c1a833a426_JaffaCakes118
Size

5KB
MD5

d3cd9686579aa7fb429502c1a833a426
SHA1

f88f9d9f9d2d0c8f82c0460d7c449a208b27c251
SHA256

d57c50e1407b8590ff53491457628093c7f39dbd0d755fe3784882c40c9b0338
SHA512

97f9d10600a8a4d3bf844e1fb1d70335d0276c91db733ae97233b7fecfe0aa2e171981283045bdb3815e196356d81b046e2aecbf717a0bc3c83972289d23f153
SSDEEP

48:6HnHZVQrsX0baS2vIB8fGImg4CopMSU5sINXKFI0MAGPu:CWskbD2AGfGlmi1U5EjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3cd9686579aa7fb429502c1a833a426_JaffaCakes118

Files

d3cd9686579aa7fb429502c1a833a426_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67d7c64683504bdf022dc3eb5ba8483d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetLastError
ExitProcess
CreateFileA
GetModuleFileNameA
GlobalAlloc
ReadFile
SetFilePointer
WriteFile
GetModuleHandleA
CloseHandle

user32

SendDlgItemMessageA
InsertMenuItemA
LoadIconA
MessageBoxA
GetSystemMenu
SendMessageA
SetDlgItemTextA
EndDialog
DialogBoxParamA

comctl32

ord17

Sections

.text
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ